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PENDING CLAIMS AS AMENDED 

Please amend the claims as follows: 

1-63. (Cancelled) 

64. (Currently Amended) A method for receiving broadcasting encrypted multimedia 
content broadcast over the air from a content provider to a plurality of authorized terminals 
authorized based on a broadcast access key ov e r th e air , comprising: 

each terminal forwarding a unique public key over the air to the content provider, 

wherein: 

each terminal has a mobile equipment and has a secure processing unit that 
securely stores a unique private key, corresponding to the unique public key, such that the 
unique private key is not accessible to the mobile equipment of the respective terminal, 

key storage in the secure processing unit is provides more secure than key 
storage in than the mobile equipment, 

the secure processing unit has processing power sufficient to decrypt an 
encrypted broadcast access key and to generate a short term key, and 

the secure processing unit does not have processing power sufficient to 
decrypt encrypted multimedia content, and 

the broadcast access key is encrypted by the content provider using the 
unique public keys of each of the respective terminals to authorize the respective terminal 
to receive encrypted multimedia content; 

each terminal receiving the respective encrypted broadcast access key over the air 
from the content provider and providing the respective encrypted broadcast access key to the 
terminal's secure processing unit, wherein the terminal's secure processing unit decrypts the 
encrypted broadcast access key using the secure processing unit's unique private key and 
securely stores the broadcast access key , wherein the securely stored broadcast access key is not 
accessible to the mobile equipment : 
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each terminal receiving short-term key information and encrypted multimedia 
content broadcast over the air from the content provider to the plurality of terminals, wherein the 
multimedia content is encrypted with a short-term key, and wherein the short-term key is 
generated using the broadcast access key and the short-term key information; 

each terminal providing the short-term key information to the terminal's secure 
processing unit, wherein the terminal's secure processing unit generates the short-term key using 
the broadcast access key and the short-term key information, and provides the short-term key to 
the terminal's mobile equipment; and 

each terminal's mobile equipment decrypting the multimedia content using the 

short-term key. 

65. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 64, wherein the short-term key is accessible to a user. 

66. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 65, wherein the short-term key is changed by the content provider at a rate 
related to a registration cost. 

67. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 64, wherein the secure processing unit is removable from the terminal. 

68. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 64, wherein the short-term key information is the short-term key encryp ted using 
the broadcast access key. 

69. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 64, wherein the short-term key is generated by applying a cryptographic hash to 
a concatenation of the short-term key information and the broadcast access key. 
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70. (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 69, wherein the short-term key information is a random value. 

71 . (Previously Presented) A method for broadcasting encrypted multimedia content as 
defined in claim 64, wherein at least one terminal comprises a mobile station. 

72. (Currently Amended) An integrated circuit for a mobile station, comprising: 
means for forwarding a unique public key over the air to a content provider; 

means for securely storing a unique private key, corresponding to the unique public key, 
such that the unique private key is not accessible to a user, wherein the means for securely 
securing storing has processing power sufficient to decrypt a n encrypted broadcast access key 
and to generate a short term key, and does not have processing power sufficient to decrypt 
encrypted multimedia content, and wherein the content provider encrypts a broadcast access key 
is encrypted by the content provider with the unique public key to authorize an integrated circuit 
securely storing a corresponding unique private key to receive encrypted multimedia content; 

means for receiving the respectiv e encrypted broadcast access key over the air from the 
content provider; 

means for decrypting the encrypted broadcast access key and securely storing the 
broadcast access key, wherein the securely stored broadcast access key is not accessible to a user; 

means for receiving short-term key information and the encrypted multimedia content 
broadcast over the air from the content provider to a plurality of mobile stations, wherein the 
multimedia content is encrypted with a short-term key, and wherein the short-term key is 
generated using the broadcast access key and the short-term key information; 

means for generating the short-term key using the securely stored broadcast access key 
and the broadcast short-term key information; and 

means for decrypting the multimedia content using the short-term key, wherein key 
storage in the means for securely storing is provides more secure than key storage in thaa the 
means for decrypting the multimedia content. 
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73. (Previously Presented) An integrated circuit as defined in claim 72, wherein the 
short-term key is accessible to a user. 

74. (Previously Presented) An integrated circuit as defined in claim 72, wherein the 
short-term key information is the short-term key encrypted using the broadcast access key. 

75. (Previously Presented) An integrated circuit as defined in claim 72, wherein the 
short-term key is generated by applying a cryptographic hash to a concatenation of the short-term 
key information and the broadcast access key. 

76. (Previously Presented) An integrated circuit as defined in claim 75, wherein the 
short-term key information is a random value. 

77. (Currently Amended) A non-transitory machine readable medium, comprising: 
code for forwarding a unique public key over the air to a content provider; 

code for securely storing a unique private key, corresponding to the unique public key, in 
a secure processing unit of a terminal such that the private key is not accessible to a mobile 
equipment of the terminal, wherein key storage in the secure processing unit is provid e s more 
secure than key storage in the mobile equipment than the secure processing unit , wherein the 
secure processing unit has processing power sufficient to decrypt a n encrypted broadcast access 
key and to generate a short term key, and does not have processing power sufficient to decrypt 
encrypted multimedia content, and wherein the broadcast access key is encrypted by the content 
provider using the unique public key of the terminal keys of each of the resp e ctiv e terminals to 
authorize the r e sp e ctive terminal to receive encrypted multimedia content; 

code for receiving the r e sp e ctive encrypted broadcast access key over the air from the 
content provider; 

code for decrypting the encrypted broadcast access key and securely storing the broadcast 
access key, wherein the securely stored broadcast access key is not accessible to the mobile 
equipment a-aser. 
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code for receiving short-term key information and the encrypted multimedia content 
broadcast over the air from the content provider to a plurality of terminals each having the 
integrated circuit , wherein the multimedia content is encrypted with a short-term key ? and 
wherein the short-term key is generated using the broadcast access key and the short-term key 
information; 

code for generating the short-term key using the securely stored broadcast access key and 
the broadcast short-term key information; and 

code for decrypting the multimedia content using the short-term key. 

78. (Currently Amended) A non-transitorv machine readable medium as defined in 
claim 77, wherein the short-term key is accessible to a user. 

79. (Currently Amended) A non-transitorv machine readable medium as defined in 
claim 77, wherein the short-term key information is the short-term key encrypted using the 
broadcast access key. 

80. (Currently Amended) A non-transitorv machine readable medium as defined in 
claim 77, wherein the short-term key is generated by applying a cryptographic hash to a 
concatenation of the short-term key information and the broadcast access key. 

8 1 . (Currently Amended) A non-transitorv machine readable medium as defined in 
claim 80, Wherein the short-term key information is a random value. 
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82. (Currently Amended) An apparatus for receiving encrypted multimedia content 
broadcast over the air from a content provider to a plurality of authorized apparatuses authorized 
based on a broadcast access key , comprising: 
a mobile equipment configured to: 

forward a unique public key over the air to the content provider, and 
decrypt the multimedia content using a short-term key, wherein the multimedia 
content is encrypted with the short-term key, and wherein the short-term key is 
generated using the [[a]] broadcast access key and short-term key information; and 
a secure processing unit configured to: 

securely store a unique private key, corresponding to the unique public key, 
such that the unique private key is not accessible to the mobile equipment, wherein 
key storage in the secure processing unit is provides more secure than key storage in 
the mobile equipment than the secure processing unit , wherein the secure processing 
unit has processing power sufficient to decrypt a n encrypted broadcast access key and 
to generate a short term key, and does not have processing power sufficient to decrypt 
encrypted multimedia content, and wherein the content provider encrypts the broadcast 
access key with the unique public key to authorize an apparatus having the secure 
processing unit securely storing the corresponding unique private key to receive the 
encrypted multimedia content; 

receive the respective encrypted broadcast access key over the air from the 
content provider; 

decrypt the encrypted broadcast access key and securely store the broadcast 
access key : wherein the securely stored broadcast access key is not accessible to the 
mobile equipment a-user: 

receive the short-term key information broadcast over the air from the content 
provider to the plurality of apparatuses: 

generate the short-term key using the securely stored broadcast access key and 
the broadcast short-term key information. 
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83. (Previously Presented) An apparatus as defined in claim 82, wherein the short-term 
key is accessible to a user. 

84. (Previously Presented) An apparatus as defined in claim 82, wherein the short-term 
key information is the short-term key encrypted using the broadcast access key. 

85. (Previously Presented) An apparatus as defined in claim 82, wherein the short-term 
key is generated by applying a cryptographic hash to a concatenation of the short-term key 
information and the broadcast access key. 

86. (Previously Presented) An apparatus as defined in claim 85, wherein the short-term 
key information is a random value. 
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87. (New) A method, comprising: 

forwarding a unique public key over the air to a content provider; 

securely storing a unique private key, corresponding to the unique public key, in a secure 
processing unit of a terminal such that the private key is not accessible to a mobile equipment of 
the terminal, wherein key storage in the secure processing unit is more secure than key storage in 
the mobile equipment, wherein the secure processing unit has processing power sufficient to 
decrypt an encrypted broadcast access key and to generate a short term key, and does not have 
processing power sufficient to decrypt encrypted multimedia content, and wherein the broadcast 
access key is encrypted by the content provider using the unique public key of the terminal to 
authorize the terminal to receive encrypted multimedia content; 

receiving the encrypted broadcast access key over the air from the content provider; 

decrypting the encrypted broadcast access key and securely storing the broadcast access 
key, wherein the securely stored broadcast access key is not accessible to the mobile equipment; 

receiving short-term key information and the encrypted multimedia content broadcast 
over the air from the content provider to a plurality of terminals each having the integrated 
circuit, wherein the multimedia content is encrypted with a short-term key, and wherein the 
short-term key is generated using the broadcast access key and the short-term key information; 

generating the short-term key using the securely stored broadcast access key and the 
broadcast short-term key information; and 

decrypting the multimedia content using the short-term key. 

88. (New) A method as defined in claim 87, wherein the short-term key is accessible to 

a user. 

89. (New) A method as defined in claim 87, wherein the short-term key information is 
the short-term key encrypted using the broadcast access key. 

90. (New) A method as defined in claim 87, wherein the short-term key is generated by 
applying a cryptographic hash to a concatenation of the short-term key information and the 
broadcast access key. 
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91 . (New) A method as defined in claim 87, wherein the short-term key information is a 
random value. 
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